$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa File: 40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa (raw, json) Hash identifier: 8zcCskVxaHqEd5zSVKqIloYCuXb7Zw26huwhH7nfP4c= Subject key identifier: 6E:8C:44:A2:F7:70:00:4B:F7:38:E8:35:7E:3C:74:98:AA:3F:50:0A Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F43285849F9DFE0BED5C7AE79C9608E40 Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 35972 IP address blocks: 23.130.236.0/24 maxlen: 24 2602:f76d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:e0:be:d5:c7:ae:79:c9:60:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=f7a376fc-ff77-4f08-a540-fb48511c4b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:09:1a:1e:20:b1:68:e6:04:b5:b4:e0:90:ad: f8:18:0f:40:19:65:9f:3b:0f:b5:13:0b:ca:bb:15: 60:8a:fe:3c:de:76:35:5b:a1:ff:22:42:4d:bb:80: 0d:d0:bb:fc:a9:65:de:d9:e3:6b:90:83:21:16:59: af:57:a2:81:66:59:97:27:2c:37:de:cb:57:da:ef: 85:6e:30:6d:32:c7:9b:e8:38:af:2e:c1:ad:c8:ce: 91:9e:76:38:52:c1:d1:54:50:73:2d:41:01:1c:a5: 6f:9c:88:0a:1e:24:4e:94:09:32:e3:dd:c3:13:f8: 9d:84:41:65:8d:51:dc:38:24:de:55:01:70:a1:87: ab:3f:e2:41:55:36:97:fb:89:6d:3a:2d:3e:6a:88: 74:2a:b0:78:44:fd:34:10:f2:32:85:67:6c:fa:b8: 53:ad:cc:d3:dc:6b:44:b2:93:6b:e2:19:57:44:bf: e2:e5:cd:85:c8:6f:fb:de:c2:46:db:23:d8:2a:95: 5e:ea:4b:cf:d0:b7:50:3c:5c:8c:23:df:bc:9d:7d: d8:46:2e:d9:63:26:7c:b1:44:20:6d:d8:64:f4:85: b7:26:b9:aa:b8:35:bc:eb:d0:a0:06:0b:7b:e6:11: 3f:77:26:58:9b:e3:b2:68:85:dd:ce:22:77:0b:4f: 6c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8C:44:A2:F7:70:00:4B:F7:38:E8:35:7E:3C:74:98:AA:3F:50:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: 23.130.236.0/24 IPv6: 2602:f76d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:67:46:06:10:61:e8:90:2d:4c:1d:54:1a:9b:16:d0:30:aa: 23:2c:0f:b7:74:3d:44:88:40:61:ac:78:7a:35:e8:96:e0:33: 40:91:c5:fb:cd:42:71:97:dc:6c:c5:2b:5c:22:d3:83:41:00: f4:50:e8:c6:26:d7:c7:40:0e:29:27:dc:cd:8d:3b:f2:41:20: 64:c7:f3:ba:40:6e:58:b6:73:38:04:86:91:13:c4:7a:90:f1: 96:c1:5a:a1:e6:72:3b:5d:34:9d:f2:3f:e4:44:76:16:12:30: da:20:da:bb:15:25:6f:7f:98:aa:93:43:78:74:ff:72:b7:0d: 02:82:fb:29:12:b5:0d:48:65:a7:52:37:76:a7:ed:d2:f2:58: e1:f3:5d:c0:28:a2:1f:53:da:dd:0e:c8:71:4c:2e:86:f6:b7: 0c:0f:16:e5:85:b2:15:33:23:f9:4e:b6:d6:b8:ee:75:41:8d: 30:19:cc:fb:f0:94:b1:2c:e9:9e:e1:fa:eb:c6:b6:6f:4d:06: f9:a2:ce:48:55:3a:b1:a6:c3:07:6d:c9:53:4f:45:8b:ac:27: 44:d7:0e:6b:6f:21:8f:75:31:cf:05:0d:2e:a1:ff:83:06:e2: 49:2f:67:39:48:27:0c:fd:43:c8:30:65:7c:15:55:a9:c1:4e: cd:0e:3e:04 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEn53+C+1ceueclgjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk ZjdhMzc2ZmMtZmY3Ny00ZjA4LWE1NDAtZmI0ODUxMWM0YjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgkaHiCxaOYEtbTgkK34GA9AGWWfOw+1EwvK uxVgiv483nY1W6H/IkJNu4AN0Lv8qWXe2eNrkIMhFlmvV6KBZlmXJyw33stX2u+F bjBtMseb6DivLsGtyM6RnnY4UsHRVFBzLUEBHKVvnIgKHiROlAky493DE/idhEFl jVHcOCTeVQFwoYerP+JBVTaX+4ltOi0+aoh0KrB4RP00EPIyhWds+rhTrczT3GtE spNr4hlXRL/i5c2FyG/73sJG2yPYKpVe6kvP0LdQPFyMI9+8nX3YRi7ZYyZ8sUQg bdhk9IW3JrmquDW869CgBgt75hE/dyZYm+OyaIXdziJ3C09sNQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFG6MRKL3cABL9zjoNX48dJiqP1AKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvNDBmMWJlM2ItMjFhYi0z ZTBkLWJiOTEtYzdjMzFkZGUwNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LsMA4E AgACMAgDBgQmAvdtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYZ0YGEGHokC1MHVQamxbQMKojLA+3dD1E iEBhrHh6NeiW4DNAkcX7zUJxl9xsxStcItODQQD0UOjGJtfHQA4pJ9zNjTvyQSBk x/O6QG5YtnM4BIaRE8R6kPGWwVqh5nI7XTSd8j/kRHYWEjDaINq7FSVvf5iqk0N4 dP9ytw0CgvspErUNSGWnUjd2p+3S8ljh813AKKIfU9rdDshxTC6G9rcMDxblhbIV MyP5TrbWuO51QY0wGcz78JSxLOme4frrxrZvTQb5os5IVTqxpsMHbclTT0WLrCdE 1w5rbyGPdTHPBQ0uof+DBuJJL2c5SCcM/UPIMGV8FVWpwU7NDj4E -----END CERTIFICATE-----Generated at Sun Jun 15 17:27:15 2025 by rpki-client